This is a product document and not legal advice. Organizations should have counsel review it with their order form, data-processing terms, school-official terms, and actual operating practices before relying on it.
1. Scope
This policy applies to hiharvey.com, public forms, blog pages, sign-in requests, and related communications. The separate App Privacy document provides additional detail for authenticated workspace use. Third-party websites and services have their own privacy notices.
2. Information collected
We may collect information you provide, such as your name, work email, school or organization, role, message, and request details. We also collect device, browser, page-view, referral, session, interaction, and security information needed to operate and understand the site.
Harvey may use cookies or similar technologies for authentication, security, preferences, analytics, and measurement. Our first-party analytics may use a keyed hash of an IP address for security, suppression, reporting, and repeat-visit matching rather than storing or returning the raw IP address. When a visitor returns to the public homepage or blog, Harvey may use that keyed match to recognize a returning visit, create a follow-up signal in our CRM, or invite the visitor to share contact details.
3. How information is used
- Respond to requests, demonstrations, invitations, and support messages.
- Operate, secure, troubleshoot, and improve the website and app.
- Measure traffic and content performance, including referral and campaign attribution.
- Prevent fraud, abuse, spam, and unauthorized access.
- Send requested service messages and, where permitted, marketing communications.
- Comply with law and enforce agreements.
4. Sharing
We may share information with service providers that host, secure, analyze, authenticate, deliver email, or otherwise operate Harvey, including our configured CRM provider; with an organization when you ask us to connect you; or when needed for legal process, safety, security, or enforcement. We do not sell personal information or use student information for targeted advertising.
5. Choices and requests
You may request access, correction, deletion, portability, restriction, or suppression where applicable. You may opt out of marketing email using the unsubscribe link in the message or by contacting hello@hiharvey.com. We may verify identity and coordinate with an organization that controls the relevant workspace.
6. Retention and security
We retain information as needed to provide the service, maintain security and audit records, resolve disputes, comply with law, and enforce agreements. Detailed repeat-visit activity is retained in Harvey for up to 90 days; a keyed visitor match value may remain in the associated CRM contact history until that contact is deleted or the value is no longer needed. We use reasonable administrative, technical, and organizational safeguards, but no online service can guarantee absolute security.
7. Children and school data
The public site is not directed to children. Do not submit student education records through a public form. School and district workflows are governed by organization instructions, applicable agreements, and the App Privacy document.
8. Changes and contact
We may update this policy by posting a revised version and changing the effective date. For privacy questions, requests, or security concerns, contact hello@hiharvey.com.